
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e36302e3233362e302f32322d3232203d3e203633363437.roa
File: 3130332e36302e3233362e302f32322d3232203d3e203633363437.roa (raw, json)
Hash identifier: PvB7R5rbDvx1hAvcsmGVf0fVA9gBKwD2ToXd+MvfvEM=
Subject key identifier: D6:72:17:06:71:19:C3:BF:1B:24:C7:85:F0:19:38:C8:45:B8:AF:85
Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial: 2459A489B95A5A7CF64781D906B3EE900C250BD9
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e36302e3233362e302f32322d3232203d3e203633363437.roa
Signing time: Mon 13 Apr 2026 08:15:03 +0000
ROA not before: Mon 13 Apr 2026 08:10:03 +0000
ROA not after: Mon 12 Apr 2027 08:15:03 +0000
asID: 63647
IP address blocks: 103.60.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:59:a4:89:b9:5a:5a:7c:f6:47:81:d9:06:b3:ee:90:0c:25:0b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Validity
Not Before: Apr 13 08:10:03 2026 GMT
Not After : Apr 12 08:15:03 2027 GMT
Subject: CN=D67217067119C3BF1B24C785F01938C845B8AF85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:52:ae:dd:1f:d2:d8:a2:61:a3:76:bd:74:
f4:ea:97:f3:8d:8b:8e:73:50:de:c4:e0:f1:f1:92:
88:a1:8c:3d:00:2a:b7:de:ee:51:c6:82:02:ce:23:
83:6a:80:24:e5:27:44:5e:48:10:b6:51:bd:b2:77:
87:93:81:dd:01:99:8a:d5:f1:df:21:99:75:fb:5f:
eb:db:a2:fe:b4:63:84:bb:21:71:70:80:b5:78:61:
53:0a:ee:ff:00:37:d9:6f:63:11:78:23:7b:07:32:
c9:b3:59:95:cf:60:36:9d:9e:b5:73:5c:92:b7:18:
0c:e6:3a:f9:2f:7c:9a:1e:94:e1:db:76:65:bc:f9:
47:bb:32:43:0c:4c:a5:a3:7e:70:59:6b:fb:d8:31:
46:33:f6:7f:e3:60:96:3d:02:c8:79:10:bd:07:7f:
02:13:bb:c1:16:df:17:4f:ce:26:79:89:b0:ed:be:
b6:bf:0c:3c:ed:db:5a:1d:d0:cb:98:f4:c7:3c:7e:
9c:97:43:bc:18:9f:b0:24:41:48:40:df:2a:1f:57:
45:5b:cf:81:98:c6:70:fa:ed:b5:f3:4a:c2:a2:f5:
58:c9:e8:53:16:75:d4:a4:0c:f8:02:7e:2f:39:52:
03:be:1b:d3:a3:20:e5:63:ca:27:91:4b:88:98:3d:
6e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:72:17:06:71:19:C3:BF:1B:24:C7:85:F0:19:38:C8:45:B8:AF:85
X509v3 Authority Key Identifier:
keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e36302e3233362e302f32322d3232203d3e203633363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.60.236.0/22
Signature Algorithm: sha256WithRSAEncryption
54:b8:76:0a:e2:45:11:0d:d7:d8:d1:c2:66:a3:d2:d6:56:a0:
7b:73:70:9f:0e:5e:ac:67:ef:31:06:e0:1b:51:41:54:d9:cb:
16:52:b3:ba:ff:da:cc:3b:95:91:fa:72:a8:1d:99:43:66:33:
72:e3:2b:a5:92:ba:99:cf:10:dd:3e:4d:bc:b0:f1:e1:9c:ae:
85:5a:fe:a7:dd:32:c9:89:c9:b5:aa:74:cc:5d:65:dd:7d:6a:
72:06:2c:3a:04:e2:bd:67:1f:67:fa:35:90:0c:6b:f6:a5:2c:
90:e1:8a:9d:ee:6d:cf:41:27:3b:01:a2:13:22:d6:9a:31:88:
f9:b8:40:da:c2:b0:aa:57:ca:b9:cd:1f:87:37:08:5a:3a:fd:
b8:02:28:01:d8:0a:fe:dc:88:b4:c1:12:61:03:9e:5c:c0:fe:
1a:7f:51:98:01:2c:bb:2d:17:00:7a:31:9f:60:56:0e:3b:b2:
b0:f8:41:40:33:29:52:62:cf:3c:6c:94:e7:66:ed:48:1b:c9:
c4:3d:a3:ed:9b:d8:79:7a:38:7e:97:6b:fe:ee:57:ff:19:4b:
73:bc:16:3c:bb:3e:03:cc:1a:99:30:ef:b6:f4:aa:d9:82:96:
33:80:13:c5:d8:11:a4:a5:ea:52:dc:93:8e:48:86:56:04:1c:
3b:a0:36:dc
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUJFmkiblaWnz2R4HZBrPukAwlC9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1
QUQzRjM5ODAeFw0yNjA0MTMwODEwMDNaFw0yNzA0MTIwODE1MDNaMDMxMTAvBgNV
BAMTKEQ2NzIxNzA2NzExOUMzQkYxQjI0Qzc4NUYwMTkzOEM4NDVCOEFGODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9WVKu3R/S2KJho3a9dPTql/ON
i45zUN7E4PHxkoihjD0AKrfe7lHGggLOI4NqgCTlJ0ReSBC2Ub2yd4eTgd0BmYrV
8d8hmXX7X+vbov60Y4S7IXFwgLV4YVMK7v8AN9lvYxF4I3sHMsmzWZXPYDadnrVz
XJK3GAzmOvkvfJoelOHbdmW8+Ue7MkMMTKWjfnBZa/vYMUYz9n/jYJY9Ash5EL0H
fwITu8EW3xdPziZ5ibDtvra/DDzt21od0MuY9Mc8fpyXQ7wYn7AkQUhA3yofV0Vb
z4GYxnD67bXzSsKi9VjJ6FMWddSkDPgCfi85UgO+G9OjIOVjyieRS4iYPW5RAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU1nIXBnEZw78bJMeF8Bk4yEW4r4UwHwYDVR0j
BBgwFoAUwcSPlZPWoZ29P6ypxu+ltVrT85gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk3ODMxNjg4NTY1NTU1NS8wL0MxQzQ4Rjk1OTNENkExOURCRDNGQUNBOUM2RUZB
NUI1NUFEM0YzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1QUQzRjM5OC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTk3ODMxNjg4NTY1NTU1NS8wLzMxMzAzMzJlMzYz
MDJlMzIzMzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzM2MzQzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmc87DANBgkqhkiG9w0BAQsFAAOCAQEAVLh2CuJFEQ3X2NHCZqPS1lag
e3Nwnw5erGfvMQbgG1FBVNnLFlKzuv/azDuVkfpyqB2ZQ2YzcuMrpZK6mc8Q3T5N
vLDx4ZyuhVr+p90yyYnJtap0zF1l3X1qcgYsOgTivWcfZ/o1kAxr9qUskOGKne5t
z0EnOwGiEyLWmjGI+bhA2sKwqlfKuc0fhzcIWjr9uAIoAdgK/tyItMESYQOeXMD+
Gn9RmAEsuy0XAHoxn2BWDjuysPhBQDMpUmLPPGyU52btSBvJxD2j7ZvYeXo4fpdr
/u5X/xlLc7wWPLs+A8wamTDvtvSq2YKWM4ATxdgRpKXqUtyTjkiGVgQcO6A23A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:21:24 2026 by rpki-client